Jom99 Privacy Policy –
Personal Data Protection for Malaysian Members

To provide a safe and responsible online wagering service, jom99 collects certain categories of personal data from its members. This collection is carried out transparently and only data that is strictly necessary is collected.

Data you provide directly:

• Full name as stated on your identity card or passport
• Date of birth for age verification (must be 18 years and above)
• Identity card number (MyKad) or passport number
• Active email address and phone number
• Current residential address
• Bank account information for deposit and withdrawal purposes
• Identity document images submitted during the KYC process

Data collected automatically:

• IP address and city-level geolocation information
• Device type, operating system, and web browser used
• Gaming session records including date, time, and game type
• Cookie data and similar tracking technologies
• Interaction logs with the platform for technical troubleshooting purposes

The personal data we collect is used for legitimate and specific purposes as outlined below. We will not use your data for any other purpose without obtaining your consent first.

• Account management: Creating, verifying, and managing your account, including password recovery and two-factor authentication (2FA).
• Financial processing: Processing deposits, withdrawals, and transaction records accurately and securely.
• Legal compliance: Meeting anti-money laundering (AML) obligations, PDPA compliance, and reporting requirements to the relevant authorities.
• Fraud prevention: Detecting and investigating suspicious activity, including the use of multiple accounts and unauthorized access.
• Platform enhancement: Analyzing usage patterns to improve platform functionality, user interface, and overall experience.
• Service communications: Sending account-related notifications, security updates, and promotional information that you have agreed to receive.
• Customer support: Handling inquiries, complaints, and disputes more effectively using accurate account records.

Jom99 takes the confidentiality of member personal data very seriously. We does not sell your data to any party for commercial purposes. However, there are limited situations where we may share certain information:

• Payment service providers: Transaction information required to process deposits and withdrawals is shared with PCI-DSS certified payment gateway providers.
• Game software providers: Game session data is shared with software providers to ensure the integrity and accuracy of game results.
• Regulatory authority: We are required to disclose information to the relevant authorities when mandated by law, including investigations into fraud and money laundering.
• Technical service providers: Third parties that help us operate the platform (such as cloud hosting and analytics providers) are bound by strict confidentiality agreements and may only use your data for specified purposes.

The jom99 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the security of your account. The following are the types of cookies we use:

• Session cookies: A temporary cookie that keeps you logged in during an active session. This cookie is automatically deleted when you close your browser.
• Preference cookies: Saving your settings such as preferred language and display layout so you do not need to reconfigure them each time.
• Security cookies: Used to identify trusted devices and detect suspicious login attempts.
• Analytics cookies: Collecting anonymized data on how you interact with the platform for service improvement purposes.

You can manage cookie settings through your web browser. However, disabling certain cookies (especially session and security cookies) may affect platform functionality and your account security.

Jom99 retains your personal data for as long as necessary to fulfil the purposes of collection and meet related legal obligations. Our general principles are as follows:

• Active account data is retained for the duration of your membership and no more than 7 years after account closure, in line with Malaysian legal requirements.
• Financial transaction records are retained for a minimum of 7 years in accordance with AML compliance requirements and tax legislation.
• KYC data and identity documents are retained for 7 years after the business relationship ends.
• Access logs and security data are retained on a rolling 90-day basis.
• Anonymized analytics data may be retained for longer periods for platform research purposes.

After the specified retention period, your data will be securely deleted using industry-standard data disposal methods, ensuring it cannot be recovered by any party.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several rights that we are obligated to respect and facilitate. Your key rights are as follows:

Jom99 continuously invests in robust data security infrastructure. The technical and organisational measures we implement include:

• End-to-end encryption: All data communications use TLS 1.3 encryption with 256-bit SSL encryption.
• Two-factor authentication (2FA): Available to all accounts and strongly recommended to be enabled by every member.
• 24/7 monitoring: Our security team monitors the platform around the clock to detect any threats or unusual activity.
• Penetration testing: We conduct regular third-party penetration testing to identify and patch vulnerabilities before they can be exploited.
• Internal access controls: Only staff who require access to specific data to carry out their duties are permitted to do so, based on the principle of least privilege.
• Staff training: All jom99 staff undergo regular data security awareness training.

While we take all reasonable precautions, no online system can guarantee 100% absolute security. We encourage you to also take personal protective measures, such as using a strong password and not sharing your login credentials.

The jom99 Platform is strictly for individuals aged 18 and above only. We do not intentionally collect or process any personal data from individuals under the age of 18.

If we find that we have inadvertently collected data from an underage individual, we will immediately:

• Suspending the account in question immediately
• Deleting all data associated with that individual
• Returning any remaining balance
• Reporting the case to the relevant authorities if necessary

Jom99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any material amendments will be communicated to you via:

• A clear notification on the platform's home page when you log in
• Email notification to your registered address at least 14 days before changes take effect
• Update the "Last Updated" date at the top of this document

Continued use of the jom99 platform after an updated Privacy Policy is published will be considered your acceptance of those changes. If you do not agree with any changes, you must stop using the platform and request account closure.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer (DPO):

• Email: [email protected]
• Response time: Within 14 business days
• Service language: Malay and English

For any dispute that cannot be resolved directly with us, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia or the relevant regulatory body.

You can also visit the page FAQ us for answers to frequently asked questions about privacy and data security, or check Terms and Conditions us for more information about the platform's terms of use.